Evaluating Data Encryption Effects on the Resilience of an Artificial Neural Network

Riccardo Cantoro (1) , Nikolaos Deligiannis (1) , Matteo Sonza Reorda (1) , Marcello Traiola (2) , Emanuele Valea (3)

1 Polito - Politecnico di Torino = Polytechnic of Turin
2 INL - Institut des Nanotechnologies de Lyon
3 TEST - Test and dEpendability of microelectronic integrated SysTems

Nowadays, many electronic systems store valuable Intellectual Property (IP) information inside Non-Volatile Memories (NVMs). Therefore, encryption mechanisms are widely used in order to protect such information from being stolen or modified by human attacks. Encryption techniques can be used for protecting the application code, or sensitive sets of data in the NVM. In particular, in machine-learning applications, the weights of an Artificial Neural Network (ANN) represent a highly valuable IP stemming from long time invested in training the system along the development phase. On the other side, systems implementing ANN applications are increasingly used in safety-critical domains (e.g., autonomous driving), where a high reliability level is required. In a previous paper, we have shown that encryption techniques, applied to the application code of generic systems, provide a significantly higher error detection rate. In this paper, we focus on an ANN application and we evaluate the detection rate induced by encryption mechanisms for transient faults possibly impacting the ANN weights. We performed experiments on a pre-trained ANN, whose weights represent the sensitive IP of our system. We executed fault injection campaigns to evaluate the ANN resilience when different encryption methods are used. Experimental results showed that the presence of specific encryption mechanisms alone induces high fault detection rates in such applications. This may allow the designer to consider security and safety mechanisms together, achieving the same results with lower costs.

Domaines: Micro et nanotechnologies/Microélectronique; Informatique [cs]

Riccardo Cantoro, Nikolaos Deligiannis, Matteo Sonza Reorda, Marcello Traiola, Emanuele Valea. Evaluating Data Encryption Effects on the Resilience of an Artificial Neural Network. DFT 2020 - 33rd IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems, Oct 2020, Frascati (on line), Italy. pp.1-4, ⟨10.1109/DFT50435.2020.9250869⟩. ⟨hal-03094602⟩